$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/jDb9ir3XH-aq3U2bk9W59Tt0PIM.roa File: jDb9ir3XH-aq3U2bk9W59Tt0PIM.roa (raw, json) Hash identifier: fwBJjeRg7PDt/L8go08QRMWlZrcLXpRGkUetCMQoQ70= Subject key identifier: 8C:36:FD:8A:BD:D7:1F:E6:AA:DD:4D:9B:93:D5:B9:F5:3B:74:3C:83 Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0CDE Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/jDb9ir3XH-aq3U2bk9W59Tt0PIM.roa Signing time: Mon 26 Aug 2024 05:26:18 +0000 ROA not before: Mon 26 Aug 2024 05:26:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 150.129.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3294 (0xcde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Aug 26 05:26:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8C36FD8ABDD71FE6AADD4D9B93D5B9F53B743C83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:37:6f:16:59:81:c1:58:0f:6e:09:c5:53: 63:8c:b3:30:9a:f3:f6:58:99:a5:12:ab:95:c8:67: 33:27:2c:1f:9b:93:91:6e:c5:a5:28:da:8f:b8:c6: ea:4d:b3:86:b4:07:a1:2c:44:51:49:c7:f1:87:86: e7:1c:77:04:d8:1a:d4:ec:d0:a1:19:20:96:d7:7e: 4c:43:56:e8:bc:52:be:4d:d8:ca:a5:58:23:af:9c: 91:7a:7f:b6:b7:0d:61:14:6b:62:c1:d9:b3:7a:76: e6:48:dc:46:08:37:32:93:4a:f8:24:7c:2e:13:80: 2e:64:9b:a9:d8:97:f0:d5:9b:ad:89:29:d0:ab:e3: 6e:40:fd:2e:3c:58:d9:a9:97:0c:84:a5:80:35:b1: 3e:78:3b:f9:3a:7e:1b:bd:2d:1e:20:47:49:d7:16: 9e:58:ac:62:3f:af:38:af:6b:56:c1:e5:b8:34:a3: 77:0f:73:ab:1f:63:38:13:4a:e6:e7:66:21:b7:7d: 78:1f:7f:5b:4f:53:98:c3:4d:a1:fa:50:83:f3:84: 36:c7:1a:43:28:8f:20:7c:e5:73:70:79:83:6d:dc: cf:6e:d8:10:30:80:4d:cf:b9:31:6d:19:b8:5d:92: 3d:a5:19:f2:67:37:6f:9f:ec:ae:70:37:ef:48:e1: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:36:FD:8A:BD:D7:1F:E6:AA:DD:4D:9B:93:D5:B9:F5:3B:74:3C:83 X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/jDb9ir3XH-aq3U2bk9W59Tt0PIM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.129.72.0/22 Signature Algorithm: sha256WithRSAEncryption 27:a3:0b:b5:cc:d1:6d:74:4c:c7:fc:0b:22:d6:74:83:ec:a8: 81:cd:ff:ed:74:10:72:d0:f5:45:ae:27:7e:0b:02:a1:a9:0c: ab:97:8e:c6:34:49:65:22:44:94:8d:f3:e4:a2:ec:9a:b7:fe: 25:c7:84:13:bb:85:9d:75:04:77:96:fa:8d:b8:c1:e2:a5:37: d4:da:34:87:21:84:65:da:b0:64:0c:88:ca:4c:da:55:a9:e5: 49:f3:26:8f:79:7e:70:72:81:15:34:2f:30:4c:9a:fe:4f:88: 44:04:12:d8:3f:4f:c5:5d:d2:45:18:18:a3:39:9a:ce:19:62: 2f:68:d6:45:34:b1:be:ce:e6:5f:1a:e8:77:74:3f:5b:9a:1b: 6c:7d:ae:e8:88:da:0a:50:71:47:bf:4e:00:d6:52:a3:61:eb: 76:0b:39:0f:7b:2e:10:d6:07:3d:04:44:41:1a:f0:5d:7c:de: e1:b0:83:dc:d1:53:ca:b4:18:8e:fa:57:d7:d4:8f:05:f6:35: 8c:8c:95:87:e5:aa:c9:9f:b5:ad:b9:a4:2d:0f:7c:f1:e3:10: 52:26:c4:95:c5:22:02:cc:5d:e2:08:c8:dc:a4:88:42:51:74: fe:51:38:a4:29:78:5e:16:c8:35:01:90:87:bc:32:cc:8d:0d: f6:fc:52:01 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNDA4MjYw NTI2MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDMzZGRDhBQkRENzFG RTZBQURENEQ5QjkzRDVCOUY1M0I3NDNDODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwCzdvFlmBwVgPbgnFU2OMszCa8/ZYmaUSq5XIZzMnLB+bk5Fu xaUo2o+4xupNs4a0B6EsRFFJx/GHhuccdwTYGtTs0KEZIJbXfkxDVui8Ur5N2Mql WCOvnJF6f7a3DWEUa2LB2bN6duZI3EYINzKTSvgkfC4TgC5km6nYl/DVm62JKdCr 425A/S48WNmplwyEpYA1sT54O/k6fhu9LR4gR0nXFp5YrGI/rziva1bB5bg0o3cP c6sfYzgTSubnZiG3fXgff1tPU5jDTaH6UIPzhDbHGkMojyB85XNweYNt3M9u2BAw gE3PuTFtGbhdkj2lGfJnN2+f7K5wN+9I4e1XAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUjDb9ir3XH+aq3U2bk9W59Tt0PIMwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9qRGI5aXIzWEgtYXEzVTJiazlX NTlUdDBQSU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCloFI MA0GCSqGSIb3DQEBCwUAA4IBAQAnowu1zNFtdEzH/Asi1nSD7KiBzf/tdBBy0PVF rid+CwKhqQyrl47GNEllIkSUjfPkouyat/4lx4QTu4WddQR3lvqNuMHipTfU2jSH IYRl2rBkDIjKTNpVqeVJ8yaPeX5wcoEVNC8wTJr+T4hEBBLYP0/FXdJFGBijOZrO GWIvaNZFNLG+zuZfGuh3dD9bmhtsfa7oiNoKUHFHv04A1lKjYet2CzkPey4Q1gc9 BERBGvBdfN7hsIPc0VPKtBiO+lfX1I8F9jWMjJWH5arJn7WtuaQtD3zx4xBSJsSV xSICzF3iCMjcpIhCUXT+UTikKXheFsg1AZCHvDLMjQ32/FIB -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org